Part 3 of 5: Risk Management, Encryption, and Continuous Monitoring For financial organizations, securing sensitive client data requires more than basic protections. 23 NYCRR 500 mandates proactive and continuous oversight, while PCI DSS requires specific measures to safeguard credit card data for businesses that accept card payments. Together, Risk Management, Encryption, and Continuous Monitoring play […]
Part 2 of 5: The Written Information Security Program (WISP) and Data Access Controls For financial professionals in New York, securing sensitive data isn’t just a best practice; it’s a legal obligation. 23 NYCRR 500, the NY SHIELD Act, and WISP—as defined in the Gramm-Leach-Bliley Act—all require organizations to maintain comprehensive data security protocols. Establishing […]
Part 1 of 5: Topic Overview and Understanding 23 NYCRR 500 Financial organizations in New York—especially smaller firms like CPA offices, insurance brokers, mortgage brokers, financial advisors, credit unions, and other financial service providers—are under increasing pressure to protect client data. As cyber threats grow more sophisticated, state and federal regulations mandate stringent data protection […]
In today’s digital landscape, cybersecurity threats are continually evolving, with new tactics targeting businesses and their customers. At CDML Computer Services, we prioritize keeping our clients informed about potential risks. One deceptive tactic to be aware of is typosquatting—a form of cybercrime where criminals register domains that mimic legitimate businesses, with slight misspellings in the […]
A new and sophisticated cybersecurity threat has emerged, targeting businesses and individuals through seemingly legitimate DocuSign emails. This blog post aims to raise awareness about this scam and provide essential tips to protect yourself and your organization. Understanding the Threat Cybercriminals are exploiting DocuSign’s APIs to send fake invoices that appear genuine. Unlike traditional phishing […]
In the constant battle between cybersecurity professionals and cybercriminals, even protective measures can be exploited. A new campaign, known as ClickFix, has found a way to manipulate Google Chrome’s Phishing Warning feature, turning a once-reliable safeguard into a new threat vector. Since its emergence in September 2024, ClickFix has been actively used to distribute malware, […]
In an era where artificial intelligence is revolutionizing various aspects of our lives, cybercriminals are exploiting this technology for malicious purposes. A sophisticated new scam targeting Gmail users has come to light, combining AI-powered voice calls with clever email spoofing techniques. This post aims to inform you about this threat and provide essential tips to […]
In today’s digital landscape, email remains a primary communication channel for businesses, individuals, and political campaigns. However, with the rise of phishing attacks and email spoofing, securing email communications has become more critical than ever. DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a powerful solution to combat email-based threats and protect organizations from attacks. […]
In today’s digital age, email remains a primary form of communication for both personal and professional purposes. However, many users overlook the risks associated with how they send group emails. This post explores the advantages of using BCC (Blind Carbon Copy) over CC (Carbon Copy) when sending emails to multiple recipients, and how this simple […]
Smartphones store vast amounts of personal and professional data, making security more critical than ever. Recent security incidents highlight the need for better protection, as both Android and iPhone users face significant vulnerabilities. Android Vulnerability: A Wake-Up Call A major discovery has impacted the Android ecosystem. Qualcomm, a leading chipset manufacturer, revealed a zero-day vulnerability […]
© Copyright 2025 CDML Computer Services, Ltd. All Rights Reserved.
